feat(p1x): de-hardcode VLM models/endpoints to vlm_config (DGX-ready)

Migre les call-sites VLM serveur vers la configuration centrale pour
fonctionner sur DGX (tunnel Ollama 11434), où gemma4:* est absent et le
port Docker 11435 est mort.

- task_planner, replay_verifier, domain_context, ir_builder, resolve_engine
  (popup): modele -> vlm_config.get_vlm_model(), defaut 11435 -> 11434
  (override GEMMA4_PORT legacy conserve)
- resolve_engine (grounding bbox x2): nouvel helper
  vlm_config.get_bbox_grounding_model() (var dediee RPA_BBOX_GROUNDING_MODEL,
  fallback RPA_GROUNDING_MODEL puis qwen2.5vl:7b-rpa) -> desambiguise le
  conflit D5-v3b, bbox_2d + num_ctx 4096 preserves
- safety_checks_provider: defaut -> get_vlm_model(), override
  RPA_SAFETY_CHECKS_LLM_MODEL preserve
- ui_detector: default_factory + resolution lazy (corrige aussi un gel a
  l'import), pas d'appel reseau a l'import
- field_extractor: property lazy via vlm_config

TDD strict (RED->GREEN), 305 tests verts, tests mockes HTTP (zero dependance
DGX reel), aucun alias Ollama.

Hors perimetre (arbitrage Dom): client Lea agent_v1/executor.py (gele),
chemin V4 observe_reason_act (RPA_REASONING_MODEL), core/config.py defaults.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

tests/unit/test_replay_critic.py

@@ -263,6 +263,54 @@ class TestVerifySemantic:
         assert result is not None
         assert result["verified"] is False
 
+    def test_verify_semantic_modele_via_vlm_config(self, verifier, screenshot_white):
+        """Le payload _verify_semantic utilise le modèle résolu par vlm_config."""
+        captured = {}
+
+        def capture_post(url, json=None, **kwargs):
+            captured["url"] = url
+            captured["model"] = (json or {}).get("model")
+            resp = MagicMock()
+            resp.ok = True
+            resp.json.return_value = {"message": {"content": "VERDICT: OUI\nRAISON: ok"}}
+            return resp
+
+        with patch(
+            "agent_v0.server_v1.replay_verifier.vlm_config.get_vlm_model",
+            return_value="modele-resolu:test",
+        ), patch("requests.post", side_effect=capture_post):
+            verifier._verify_semantic(
+                screenshot_before=screenshot_white,
+                screenshot_after=screenshot_white,
+                expected_result="Le fichier est ouvert",
+            )
+
+        assert captured["model"] == "modele-resolu:test"
+
+    def test_verify_semantic_endpoint_par_defaut_11434(
+        self, verifier, screenshot_white, monkeypatch
+    ):
+        """Sans GEMMA4_PORT, _verify_semantic vise 11434, pas le port mort 11435."""
+        monkeypatch.delenv("GEMMA4_PORT", raising=False)
+        captured = {}
+
+        def capture_post(url, json=None, **kwargs):
+            captured["url"] = url
+            resp = MagicMock()
+            resp.ok = True
+            resp.json.return_value = {"message": {"content": "VERDICT: OUI\nRAISON: ok"}}
+            return resp
+
+        with patch("requests.post", side_effect=capture_post):
+            verifier._verify_semantic(
+                screenshot_before=screenshot_white,
+                screenshot_after=screenshot_white,
+                expected_result="Le fichier est ouvert",
+            )
+
+        assert ":11434" in captured["url"]
+        assert ":11435" not in captured["url"]
+
     @patch("requests.post")
     def test_vlm_timeout_retourne_none(self, mock_post, verifier, screenshot_white):
         """Timeout VLM → retourne None (fallback gracieux)."""